aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* * Makefile.am: No need to link with curl any longer.David Shaw2005-08-215-38/+84
| | | | | | | | | | | | | * main.h, misc.c (path_access): New. Same as access() but does a PATH search like execlp. * keyserver.c (curl_can_handle): Removed. Replaced by... (curl_cant_handle): We are now relying on curl as the handler of last resort. This is necessary because PGP LDAP and curl LDAP are apples and oranges. (keyserver_typemap): Only test for ldap and ldaps. (keyserver_spawn): If a given handler is unusable (as determined by path_access()) then try gpgkeys_curl.
* * exec.h, exec.c (make_tempdir, expand_args, exec_write, exec_read):David Shaw2005-08-213-24/+38
| | | | | Minor cleanup to use bitfield flags instead of a bunch of integers.
* * g10.c (main): Add aliases sign-with->local-user and user->recipientDavid Shaw2005-08-202-4/+15
| | | | | to make switching from PGP command line to GPG easier.
* * options.skel: Remove the surfnet LDAP keyserver from the list ofDavid Shaw2005-08-193-2/+12
| | | | | | | | samples since it is being shut down. * getkey.c (classify_user_id): Disable the '.' and '+' search modes since they aren't supported yet.
* Missed keydb.h entry for set_passphrase_from_stringDavid Shaw2005-08-061-0/+1
|
* * g10.c (main), passphrase.c (set_passphrase_from_string): NewDavid Shaw2005-08-053-0/+24
| | | | | | --passphrase command line option. Only useful in very special circumstances.
* auto retrieve keys from PKA. Thsi allows to specify an email addressWerner Koch2005-08-0510-325/+503
| | | | | | so that gpg can get the key from DNS. This helps with opportunistic encryption. No integration with the trust modell yet.
* * keygen.c (proc_parameter_file): Sanity check items in keygen batchDavid Shaw2005-08-052-98/+123
| | | | | file. Noted by Michael Schierl.
* * pkclist.c (do_edit_ownertrust): Don't allow ownertrust level 0.David Shaw2005-08-052-1/+4
| | | | | Noted by Michael Schierl.
* * keygen.c (write_keyblock): Don't try and build deleted kbnodes sinceDavid Shaw2005-08-042-8/+14
| | | | | we start our tree with one.
* Revert bad patch.David Shaw2005-08-041-8/+1
|
* * keygen.c (start_tree): Need to use an actual packet type (which weDavid Shaw2005-08-042-1/+13
| | | | | can then delete) to start the tree.
* Fixes pertaining to revocation creation with subkey-only exported card keysWerner Koch2005-08-046-7/+44
|
* Implemented PKA trust modelWerner Koch2005-07-2811-58/+286
|
* Converted all m_free to xfree etc.Werner Koch2005-07-2743-802/+805
|
* * keyserver.c (keyserver_typemap): Special-case LDAP since curl willDavid Shaw2005-07-272-1/+8
| | | | | report that it can handle it, and we don't want it to.
* * passphrase.c (agent_get_passphrase): Make sure to release theWerner Koch2005-07-264-7/+39
| | | | | | | | | saved codeset. (agent_open): Add arg ORIG_CODESET and switch back to it in case of error. Changed all callers. * zh_TW.po, fr.po, cs.po: Updated.
* Preparing a releaseWerner Koch2005-07-261-2/+1
|
* * keyedit.c (sign_uids): Don't prompt for setting signature expiry toDavid Shaw2005-07-222-17/+25
| | | | | | match key expiry unless --ask-cert-expire is set. Suggested by Peter Palfrader.
* * gpg.sgml (http):Werner Koch2005-07-2211-21/+77
| | | | | | * g10.c, options.h: New option --exit-on-status-write-error. * status.c (write_status_text): Make use of this option.
* * options.h, g10.c (main), keyedit.c (keyedit_menu): Use --interactiveDavid Shaw2005-07-225-10/+15
| | | | | | | | | to enable the uid walking when signing a key with no uids specified to sign. * keylist.c (list_keyblock_print): Fix silly typo. Noted by Greg Sabino Mullane.
* * keyserver.c (curl_can_handle): New. Do a runtime check against libcurlDavid Shaw2005-07-203-16/+43
| | | | | | | | to see if it can handle a particular protocol. (keyserver_typemap): Call it here. * Makefile.am: Pull in libcurl for curl_version_info() if used.
* * g10.c, options.h: New option --limit-card-insert-tries.Werner Koch2005-07-194-2/+18
| | | | | * cardglue.c (open_card): Use it.
* * configure.ac [W32]: Always set DISABLE_KEYSERVER_PATH.Werner Koch2005-07-196-6/+102
| | | | | | | | | | * export.c (parse_export_options): New option export-reset-subkey-passwd. (do_export_stream): Implement it. * misc.c (get_libexecdir): New. * keyserver.c (keyserver_spawn): Use it
* * tdbio.c (open_db): Check for EROFS. Suggested by Bryce Nichols.Werner Koch2005-07-182-1/+9
| | | | | | * ttyio.c (do_get): Move printing of the prompt after disabling echo. Suggested by Scott Worley.
* * trustdb.c (clean_uids_from_key): Don't keep a valid selfsig aroundDavid Shaw2005-07-095-22/+24
| | | | | | | | | | | | | when compacting a uid. There is no reason to make an attacker's job easier - this way they only have a revocation which is useless in bringing the uid back. * keydb.h, kbnode.c (undelete_kbnode): Removed. No longer needed. * import.c (chk_self_sigs): Allow a uid revocation to be enough to allow importing a particular uid (no self sig needed). This allows importing compacted uids.
* * keygen.c (save_unprotected_key_to_card): Better fix for gcc4 warning.David Shaw2005-06-202-1/+6
|
* * gpg.sgml: Document smartcard related options.Werner Koch2005-06-204-4/+21
| | | | | | * g10.c, options.h: New option --no-interactive-selection. * keyedit.c (keyedit_menu): Use it.
* (parse_signature): Use log_info for messagesWerner Koch2005-06-186-5/+22
| | | | | | | about missing timestamp or keyid. In case we don't use that key there won't be no further error and thus gpg does not need to return with an error.
* * keygen.c (save_unprotected_key_to_card): Fix gcc4 warning.David Shaw2005-06-145-8/+45
| | | | | | | | | | * options.h, import.c (parse_import_options, import_one): Add import-clean-uids option to automatically compact unusable uids when importing. Like import-clean-sigs, this may nodify the local keyring. * trustdb.c (clean_uids_from_key): Only allow selfsigs to be a candidate for re-inclusion.
* * options.h, import.c (parse_import_options, clean_sigs_from_all_uids,David Shaw2005-06-123-6/+49
| | | | | | | | import_one): Add import-clean-sigs option to automatically clean a key when importing. Note that when importing a key that is already on the local keyring, the clean applies to the merged key - i.e. existing superceded or invalid signatures are removed.
* * getkey.c (merge_selfsigs_main, merge_selfsigs_subkey): Make sureDavid Shaw2005-06-122-7/+18
| | | | | | that even after keys may be merged together, we only have one chosen selfsig.
* * options.h, import.c (parse_import_options, delete_inv_parts):David Shaw2005-06-103-26/+5
| | | | | import-unusable-sigs is now a noop.
* * options.h, export.c (do_export_stream), keyedit.c (keyedit_menu,David Shaw2005-06-106-108/+10
| | | | | | | | | menu_clean_subkeys_from_key), trustdb.h, trustdb.c (clean_subkeys_from_key): Remove subkey cleaning function. It is of very limited usefulness since it cannot be used on any subkey that can sign, and can only affect multiple selfsigs on encryption-only subkeys.
* * keydb.h, kbnode.c (undelete_kbnode): New function to undelete aDavid Shaw2005-06-104-10/+53
| | | | | | | | kbnode. * trustdb.c (clean_uids_from_key): Further tweak the algorithm so that the last good selfsig is kept when the chosen selfsig is a revocation.
* * trustdb.c (clean_uids_from_key), keyedit.cDavid Shaw2005-06-093-33/+35
| | | | | | (menu_clean_uids_from_key): Tweak algorithm to preserve the last selfsig which helps prevent uid resurrections.
* * getkey.c (fixup_uidnode, merge_selfsigs_main): Handle both expiredDavid Shaw2005-06-082-12/+16
| | | | | | | and revoked uids in fixup_uidnode(). No need to special case in merge_selfsigs_main(). This also means that an expired uid will have its selfsig tagged with chosen_selfsig.
* * options.h, g10.c (main), export.c (parse_export_options,David Shaw2005-06-084-23/+46
| | | | | | | | do_export_stream): Add export-options export-clean-sigs, export-clean-uids, export-clean-subkeys, and export-clean which is all of the above. Export-minimal is the same except it also removes all non-selfsigs. export-unusable-sigs is now a noop.
* * signal.c [HAVE_DOSISH_SYSTEM]: Fix unused function warnings on mingw32.David Shaw2005-06-013-19/+17
| | | | | | | Noted by Joe Vender. * passphrase.c [_WIN32]: Remove unused variables.
* * keyedit.c (menu_clean_uids_from_key, menu_clean_subkeys_from_key),David Shaw2005-05-313-4/+11
| | | | | | trustdb.c (clean_uids_from_key, clean_subkeys_from_key): Fix mingw32 build warnings. Noted by Joe Vender.
* * keydb.h [!ENABLE_AGENT_SUPPORT]: Define dummy types.Werner Koch2005-05-316-11/+60
| | | | | | | | | | | | | * cardglue.c (assuan_strerror, assuan_transact): Dummy functions if not build with agent support. * zh_TW.po, zh_CN.po, es.po, ro.po: Updated. * tr.po: Updated from TP. Note: this is an exception in general translations from the Robot are not anymore accepted. * regcomp.c (MB_CUR_MAX) [_WIN32]: Define it only if not defined.
* Updated FSF street address and preparations for a release candidate.Werner Koch2005-05-3179-81/+172
|
* * trustdb.h, trustdb.c (clean_subkeys_from_key): New. Walk throughDavid Shaw2005-05-314-20/+129
| | | | | | | | | | | | | the subkeys on a key, and mark any that aren't usable for deletion. Note that a signing subkey is never marked for deletion since these keys are still useful after expiration or revocation. * keyedit.c (menu_clean_subkeys_from_key): New function to call clean_subkeys_from_key() on a key. Note that the strings here are not marked for translation yet. The UI is still in flux, and there is no point in annoying the translators twice. (keyedit_menu): Call it here as part of the "clean" command.
* * trustdb.h, trustdb.c (clean_uids_from_key): New. Walk through theDavid Shaw2005-05-304-14/+144
| | | | | | | | | user IDs on a key, and mark any that aren't valid for deletion. * keyedit.c (menu_clean_uids_from_key): New function to call clean_uids_from_key() on a key. (keyedit_menu): Call it from here as part of the "clean" command.
* * g10.c (main): Default {export|import}-unusable-sigs to off until theDavid Shaw2005-05-272-2/+7
| | | | | "clean" UI can be finished.
* * passphrase.c (ask_passphrase): Unescape the description string.Werner Koch2005-05-246-44/+59
| | | | | | | * cardglue.c (unescape_status_string): Removed. Changed all caller to use ... * misc.c (unescape_percent_string): New.
* (add_notation_data): Check number of at-signs.Werner Koch2005-05-241-1/+1
|
* (add_notation_data): Check number of at-signs.Werner Koch2005-05-242-1/+11
|
* * app-openpgp.c, app-common.h: Again updated from gnupg 1.9 CVS.Werner Koch2005-05-234-232/+22
| | | | | | | * cardglue.c (open_card): Check USE_AGENT. (agent_scd_checkpin): Implemented Assuan part. (agent_scd_change_pin): Ditto.
* * cardglue.c (open_card): Check USE_AGENT.Werner Koch2005-05-234-75/+190
| | | | | | | | | | | | | | | | | | | * g10.c (main): Option --debug-ccid-driver may now be given several times increase the debug level. * ccid-driver.c (parse_ccid_descriptor): Mark SCR335 FW version 5.14 as good. (do_close_reader): Never do a reset. The caller should instead make sure that the reader has been closed properly. The new retry code in ccid_slot_status will make sure that the readersatrts up fine even if the last process didn't closed the USB connection properly. (ccid_get_atr): For certain readers try switching to ISO mode. Thanks to Ludovic Rousseau for this hint and the magic numbers. (print_command_failed): New. (bulk_in): Use it here. Add new arg NO_DEBUG. (ccid_slot_status): Disabled debugging.